CVEvulnerability
CVE-2008-2315
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190
Description
Multiple integer overflows in Python 2.5.2 and earlier allow context-dependent attackers to have an unknown impact via vectors related to the (1) stringobject, (2) unicodeobject, (3) bufferobject, (4) longobject, (5) tupleobject, (6) stropmodule, (7) gcmodule, and (8) mmapmodule modules. NOTE: The expandtabs integer overflows in stringobject and unicodeobject in 2.5.2 are covered by CVE-2008-5031.
Affected configurations
• python python (<= 2.5.2)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://bugs.gentoo.org/attachment.cgi?id=159418&action=view Exploit
- http://bugs.gentoo.org/show_bug.cgi?id=230640 Third Party Advisory
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html Third Party Advisory
- http://secunia.com/advisories/31305 Broken Link
- http://secunia.com/advisories/31332 Broken Link
- http://secunia.com/advisories/31358 Broken Link
- http://secunia.com/advisories/31365 Broken Link
- http://secunia.com/advisories/31518 Broken Link
- http://secunia.com/advisories/31687 Broken Link
- http://secunia.com/advisories/32793 Broken Link
- http://secunia.com/advisories/33937 Broken Link
- http://secunia.com/advisories/37471 Broken Link
- http://secunia.com/advisories/38675 Broken Link
- http://security.gentoo.org/glsa/glsa-200807-16.xml Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 Third Party Advisory
- http://support.apple.com/kb/HT3438 Third Party Advisory
- http://support.avaya.com/css/P8/documents/100074697 Third Party Advisory
- http://www.debian.org/security/2008/dsa-1667 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 Broken Link, Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 Broken Link, Third Party Advisory
- http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/11/05/2 Mailing List
- http://www.openwall.com/lists/oss-security/2008/11/05/3 Mailing List
- http://www.securityfocus.com/archive/1/507985/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/30491 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-632-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html Third Party Advisory
- http://www.vupen.com/english/advisories/2008/2288 Broken Link, Third Party Advisory
- http://www.vupen.com/english/advisories/2009/3316 Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44172 VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 Broken Link
- http://bugs.gentoo.org/attachment.cgi?id=159418&action=view Exploit
- http://bugs.gentoo.org/show_bug.cgi?id=230640 Third Party Advisory
- http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html Third Party Advisory
- http://secunia.com/advisories/31305 Broken Link
- http://secunia.com/advisories/31332 Broken Link
- http://secunia.com/advisories/31358 Broken Link
- http://secunia.com/advisories/31365 Broken Link
- http://secunia.com/advisories/31518 Broken Link
- http://secunia.com/advisories/31687 Broken Link
- http://secunia.com/advisories/32793 Broken Link
- http://secunia.com/advisories/33937 Broken Link
- http://secunia.com/advisories/37471 Broken Link
- http://secunia.com/advisories/38675 Broken Link
- http://security.gentoo.org/glsa/glsa-200807-16.xml Third Party Advisory
- http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.525289 Third Party Advisory
- http://support.apple.com/kb/HT3438 Third Party Advisory
- http://support.avaya.com/css/P8/documents/100074697 Third Party Advisory
- http://www.debian.org/security/2008/dsa-1667 Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:163 Broken Link, Third Party Advisory
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:164 Broken Link, Third Party Advisory
- http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=InfoDocument-patchbuilder-readme5032900 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2008/11/05/2 Mailing List
- http://www.openwall.com/lists/oss-security/2008/11/05/3 Mailing List
- http://www.securityfocus.com/archive/1/507985/100/0/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/30491 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/usn-632-1 Third Party Advisory
- http://www.vmware.com/security/advisories/VMSA-2009-0016.html Third Party Advisory
- http://www.vupen.com/english/advisories/2008/2288 Broken Link, Third Party Advisory
- http://www.vupen.com/english/advisories/2009/3316 Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44172 VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44173 VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8445 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8683 Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9761 Broken Link